DFIR130 - Endpoint Examinations and Response with OpenText Endpoint Solutions Training Logo

DFIR130 - Endpoint Examinations and Response with OpenText Endpoint Solutions Training

Live Online & Classroom Enterprise Training

An instructor-led, hands-on training that teaches how to install, configure, and use OpenText Endpoint Investigator to perform endpoint examinations, data acquisition, searches, and build forensic case reports.

Looking for a private batch ?

REQUEST A CALLBACK

Need help finding the right training?

Your Message

  • Enterprise Reporting

  • Lifetime Access

  • CloudLabs

  • 24x7 Support

  • Real-time code analysis and feedback

What is DFIR130 - Endpoint Examinations and Response with OpenText Endpoint Solutions Training about?

This intensive four-day course combines instruction with practical exercises and real-world simulations to help learners install the Endpoint Investigator tools, deploy forensic agents, collect and analyze data remotely, and create organized forensic case reports using bookmarking functionality and processor tools. 

What are the objectives of DFIR130 - Endpoint Examinations and Response with OpenText Endpoint Solutions Training ?

Students attending this course will learn the following:

  • How to install and configure the Secure Authentication of EnCase (SAFE) server software.
  • How to deploy the agent, which enables the examination of network nodes remotely.
  • How to preview and acquire remote data, both at a physical (sector-by-sector) level and logically.
  • How to preview and acquire physical memory (RAM) and capture a snapshot of volatile data, including open ports and running processes.
  • How to preview and collect data using the Rapid Preview OpenText Endpoint Investigator functionality.
  • How to collect data by using the Enhanced Agent.
  • How to navigate, filter, sort, and search data shown in the OpenText Endpoint Investigator interface.
  • How to use the Evidence Processor to identify email and internet artifacts.
  • How to bookmark notable data and build a case report.

Who is DFIR130 - Endpoint Examinations and Response with OpenText Endpoint Solutions Training for?

This training is designed for:

  • Digital forensic analysts and incident responders.
  • Endpoint security investigators supporting DFIR operations.
  • SOC analysts involved in remote endpoint examinations.
  • IT security professionals seeking hands-on forensic skills.
  • Cybersecurity practitioners responsible for endpoint evidence collection and analysis.

What are the prerequisites for DFIR130 - Endpoint Examinations and Response with OpenText Endpoint Solutions Training?

Learners should have:

  • Basic computer skills and familiarity with Windows operating systems.
  • Fundamental understanding of cybersecurity concepts (helpful).
  • Awareness of common endpoint investigation use cases.
  • Familiarity with standard file systems and memory concepts.
  • Optional: Familiarity with basic forensic terminology and processes.

Available Training Modes

Live Online Training

4 Days

Who is the instructor for this training?

The trainer for this DFIR130 - Endpoint Examinations and Response with OpenText Endpoint Solutions Training has extensive experience in this domain, including years of experience training & mentoring professionals.

Course Logo

DFIR130 - Endpoint Examinations and Response with OpenText Endpoint Solutions Training - Certification & Exam

  • SpringPeople is the Authorized Training Partner of Opentext.
  • The training fees is exclusive of exam cost.
  • For any queries, feel free to reach us at Opentext@springpeople.com

Reviews